Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/096d5434-77a1-3dff-afe0-cfdca83ad40d.roa
File:                     096d5434-77a1-3dff-afe0-cfdca83ad40d.roa (raw, json)
Hash identifier:          AdoQo+iMFQrLTawL3F6q3OF2eJO3wLsUBo5vYwn+Mp8=
Subject key identifier:   2C:27:41:BC:68:65:07:04:81:73:A4:DE:D4:4D:BA:12:DE:B9:04:CC
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285847A47138C22839E4E305530800
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/096d5434-77a1-3dff-afe0-cfdca83ad40d.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     54113
IP address blocks:        140.248.236.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:38:c2:28:39:e4:e3:05:53:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=2e49db50-9e70-493f-835f-8a61eee93feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:5b:03:c4:de:3b:fc:c4:0a:4a:d9:ff:c1:
                    95:98:d5:03:9b:57:4e:af:76:51:56:f9:0e:35:e3:
                    b2:28:20:81:0d:00:cc:ac:8f:62:e2:9e:93:98:64:
                    7e:c0:ca:2a:27:fa:24:2f:88:26:4f:44:86:b6:7a:
                    49:a9:31:38:e9:99:7f:5e:c0:39:3b:5e:7b:6e:10:
                    55:75:aa:eb:4d:39:7f:40:ab:6b:65:3f:89:2a:27:
                    64:e5:d8:c6:96:fe:70:d2:8f:5d:87:bf:d1:d1:e4:
                    6c:5b:0e:53:e1:a1:a4:b4:38:6c:20:3f:0d:8f:39:
                    56:2f:d6:c7:bb:df:62:5c:52:3d:aa:3a:1f:81:94:
                    85:25:c0:ca:69:7b:0e:46:b7:76:b6:65:2e:61:78:
                    5c:7c:fe:53:60:45:14:3b:9a:43:19:3d:cf:34:22:
                    49:dd:77:71:20:26:56:a7:a1:7b:a4:84:79:db:7b:
                    56:91:e5:ff:2e:6b:8c:aa:9e:8c:ac:5a:30:64:77:
                    be:c9:54:6e:0c:10:8f:53:cd:8f:9c:ac:7f:91:05:
                    c9:3a:19:22:75:9a:36:5f:aa:76:26:1c:ce:c1:01:
                    c2:99:6e:44:17:c1:c8:67:37:e8:c1:d4:6c:35:9a:
                    9b:6d:46:6c:7b:d7:b8:7f:53:21:1f:86:aa:4c:31:
                    2f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:27:41:BC:68:65:07:04:81:73:A4:DE:D4:4D:BA:12:DE:B9:04:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/096d5434-77a1-3dff-afe0-cfdca83ad40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.236.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f3:7f:a4:9d:c0:74:28:a5:5f:5d:23:02:79:bd:b9:87:5c:
         7b:ae:dd:1b:97:90:44:5d:ad:4d:06:e8:b7:93:82:92:17:5c:
         9c:52:31:5c:c9:51:d3:a0:bc:5f:e2:8f:eb:7a:ba:b3:d6:64:
         6e:91:8c:d1:55:a0:26:60:df:a7:bb:7a:8d:ff:5c:2a:3f:f9:
         1b:b1:15:50:6a:35:9e:ba:ee:15:62:74:5e:b5:da:22:bd:30:
         94:e3:36:2d:e2:0d:93:2d:fc:81:b9:55:0f:10:0f:24:08:ad:
         23:ec:e1:6d:41:a6:51:33:1c:05:8a:9c:aa:46:cc:fd:13:45:
         ec:19:e0:49:bc:e1:31:3f:38:bb:01:da:97:74:b1:b8:5d:19:
         fe:6b:79:17:b3:ad:52:0b:e8:89:22:33:44:b3:e7:3f:24:cd:
         84:3f:08:e8:c0:d7:56:d9:66:cd:4d:da:ae:9b:78:ce:c2:7a:
         fb:a2:bf:0f:63:6d:ad:e6:35:ef:61:04:5b:d3:28:f8:29:29:
         b7:02:a6:d5:50:7a:aa:5b:06:01:8a:34:b3:7e:9c:e5:da:82:
         30:c6:77:b7:ae:8a:8d:19:3b:02:28:cb:2a:4d:cc:a6:2e:06:
         db:86:47:06:d8:71:23:7d:13:7a:37:1f:16:7b:6b:26:68:4c:
         5c:df:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org